← CVE Intelligence

CVE-2024-54176

IBM UrbanCode Deploy missing authentication PUBLISHED

Description (CNA)

IBM DevOps Deploy 8.0 through 8.0.1.4, 8.1 through 8.1.0.0 and IBM UrbanCode Deploy (UCD) 7.0 through 7.0.5.25, 7.1 through 7.1.2.21, 7.2 through 7.2.3.14 and 7.3 through 7.3.2 could allow an authenticated user to obtain sensitive information about other users on the system due to missing authorization for a function.

Affected (CNA)

Vendor / productVersions
IBM / UrbanCode Deployaffected 7.0 through 7.0.5.25; affected 7.1 through 7.1.2.21; affected 7.2 through 7.2.3.14; affected 7.3 through 7.3.2.9
IBM / DevOps Deployaffected 8.0 through 8.0.1.4; affected 8.1 through 8.1.0.0

CWE

CWE-306

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.